Description
Cross-site scripting (XSS) vulnerability in wikka.php in WikkaWiki before 1.3.4-p1 allows remote attackers to inject arbitrary web script or HTML via the wakka parameter to sql/.
References
- https://wush.net/trac/wikka/ticket/1152
- wikkawiki-cve20135586-xss(87013) vdb-entry
- https://wush.net/trac/wikka/changeset/1896
- http://packetstormsecurity.com/files/123196
- https://wush.net/trac/wikka/changeset/1900
- 20130911 Cross-Site Scripting (XSS) in WikkaWiki mailing-list
- http://docs.wikkawiki.org/WhatsNew134
- 20130911 Cross-Site Scripting (XSS) in WikkaWiki mailing-list
- 97183 vdb-entry
- 62325 vdb-entry
- 54790 third-party-advisory
- https://www.htbridge.com/advisory/HTB23170
- https://wush.net/trac/wikka/ticket/1153